Cybersecurity briefing, 2026-06-22

Your EDR being there when ransomware fires?

• Trusted Plugin Updates Became the Payload
• FortiBleed Becomes a Credential-Resale Problem
• Gravity SMTP Bug Exposes Mail-Sending Credentials
• Outbound Traffic Is the Missing Cloud Control
• Trusted Salesforce Access Became the Blast Radius
• Infected Routers Become a Hidden Scanning Fabric
• Ransomware Affiliates Rent Kernel-Grade EDR Killing
• Sponsored Downloads Become the Infection Path
• Public PoC Turns Apple Boot Trust into Custody Risk
• Stolen Logins Now Come as Targeted Shortlists
• Trusted WhatsApp Contacts Now Carry Malware
• North Korea Attribution Expands Mastra Poisoning Risk
• Squidbleed Lets One User’s Requests Leak to Another
• Frontier AI Meets Broken Basics
• Trusted Logins Are the New Enterprise Break-In
• AI Browsers Can Cross Into Host Control

Recent editions

• Sunday, June 21, 2026: Infected Routers Become a Hidden Scanning Fabric · 4 stories
• Saturday, June 20, 2026: Gravity SMTP Bug Exposes Mail-Sending Credentials · 11 stories
• Friday, June 19, 2026: Ransomware Affiliates Rent Kernel-Grade EDR Killing · 13 stories
• Thursday, June 18, 2026: Trusted Plugin Updates Became the Payload · 17 stories
• Wednesday, June 17, 2026: Port Ransomware Reaches Through Cloud Identity · 16 stories
• Tuesday, June 16, 2026: Port Ransomware Reaches Through Cloud Identity · 19 stories
• Monday, June 15, 2026: Stolen CDN Keys Turn Plugin Scripts Into Backdoors · 8 stories